Researchers from the University of Birmingham and cybersecurity firm Fuzzware have revealed that malicious or compromised SIM cards can be used to issue commands to smartphones and cellular-connected devices, potentially allowing attackers to steal data, disrupt communications, or even execute code.